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Claims 



1 . A method, including steps of 

sending a first certificate from a first entity, said first certificate including 
security information regarding at least a second entity, said first certificate including 
information authenticating a second certificate from said second entity; and 

sending skid second certificate from said second entity; 

whereby a Recipient of said first certificate and said second certificate can 
authenticate from information therein a first set of security information to associate with 
said first entity and a second sdfk security information to associate with said second 



entity. 



2. A method asMn claim 1, wherein at least one of the following 
includes a root certificate: said first certificate, said second certificate. 



3 . A method as in claim 1 , wherein 

said first certificate includes both an expiration date and information 



authenticating a third certificate; and 



said third certificate includes an Expiration date other than said expiration 



date for said first certificate. 
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4. \ A method as in claim 1, wherein said first certificate includes 
information authenticating a certificate from said first entity other than said first 
certificate. 



5. A method as M claim 1, wherein said first certificate includes 
information authenticating a future intended version of said first certificate. 



6. A method as in clW 1, Avherein said second certificate includes 



information authenticating a third certificj 



e. 



7. A method as in claim 11 Wherein 

said second certificate including security information regarding at least a 
third entity, said second certificate including informat/on authenticating a third certificate 
from said third entity; 

and including steps of sending said third certificate from said third entity 



8. A method as in claimu, wherein said security information includes a 
set of authorizations for said second entity. 



9. An article of manufactureAsaid article including a computer data 
signal embodied in readable medium, said readable medium including at least one of the 
following: a carrier wave, a memory, or a storage device; said data signal including 
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1 a firkt certificate indicating a first entity as its source and including (a) 

2 security information regarding at least a second entity, and (b) information authenticating 

3 a second certificate from said second entity. 



10. 



article as in claim 9, including a second certificate indicating said 

6 second entity as its souice; whereby a recipient of said first certificate and said second 

7 certificate can authenticate from information therein a first set of security information to 

8 associate with said first enVity a/d k second set of security information to associate with 
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said second entity. 



11. An articll 



as 



includes a root certificate: said fin 



inklaim 9, wherein at least one of the following 
certificate, said second certificate. 



12. An article as Un clai^n 9, wherein 

said first certificate! includes both an expiration date and information 



6 authenticating a third certificate; an< 
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said third certificate includes an expiration date other than said expiration 



8 date for said first certificate. 
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13. An article as in claita 9, wherein said first certificate includes 

21 information authenticating a certificate fr\n said first entity other than said first 

22 certificate. 
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14. Ail article as in claim 9, wherein said first certificate includes 
information authenticating a future intended version of said first certificate. 



15. An article 



fas) in claim 9, wherein said second certificate includes 



information authenticating! a third/certificate. 



16. An artible as^in eland 9, wherein 

said second certificate deluding security information regarding at least 
third entity, said second certificate j/cluding information authenticating a third certificate 
from said third entity; 

and including stejps of sending said third certificate from said third entity 



17. An article ai in claim 9, wherein said security information includes 
set of authorizations for said second entity. 
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